-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
implement token for kaos init #23
Labels
Comments
nithishr
added a commit
that referenced
this issue
Nov 12, 2019
nithishr
added a commit
that referenced
this issue
Nov 12, 2019
aalhour
added a commit
that referenced
this issue
Dec 20, 2019
* [#23] Adapted the terraform variables; * #23 Pass the authorization token to terraform while building kaos * Add the decorators & headers for authorizing all requests to all backend endpoints & CLI operations * Add authorization to backend unit tests * Remove unused import * Fix integration test by adding authorization * Fix integration test by adding authorization * Changes for new version of config file in facades * Fix integration test (missing auth header) * Review fixes: Change decorator name; token renaming * Fix broken unit tests * Test integration test * Revert the Authorization Header back to custom Token header * Rename the header from Token to X-Authorization-Token * Change the X-Authorization-Header to custom X-Token header * Add error handling to cli; Fix auth header typo * Fix typo in Auth Exception message * fixes * Version updated to: 1.1.1 Co-authored-by: Ahmad Alhour <aalhour@users.noreply.github.com> Co-authored-by: Daniel <dnlmrls9@gmail.com>
ms-shankar
added a commit
that referenced
this issue
Jan 28, 2020
aalhour
pushed a commit
that referenced
this issue
Feb 4, 2020
* temp tf_state validation check removed * [WIP k-xxx] tf state file validations * tf_state file fixed for local, fixed bug for multiple deployments of the same kind * build deploy style correction * Version updated to: 1.1.4 * descriptive kaos home (fixed color scheme bug) * Version updated to: 1.1.4 * write_aws_auth_config var removed to resolve aws build fails after merging #23 * Version updated to: 1.1.4
8 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What is the desired change?
Simple security for the cluster can be improved by safeguarding access with a token (placeholder implemented).
How will this change improve kaos?
Add a layer of security to ensure a cluster is not fully accessible without a token.
Any thoughts on the implementation approach?
User flow would be as follows:
kaos build ...
./kaos/config
(have to think of immutability)token exists
, and add header to all requestsThe text was updated successfully, but these errors were encountered: